mirror of
https://git.mirrors.martin98.com/https://github.com/actions/toolkit
synced 2026-01-03 12:42:58 +08:00
Remove allow-list from audit
Releases can be made or PRs can be merged even if the workflow is failing
This commit is contained in:
parent
3d46598e70
commit
af2d2ff198
3
.github/workflows/audit.yml
vendored
3
.github/workflows/audit.yml
vendored
@ -32,8 +32,7 @@ jobs:
|
|||||||
run: npm run bootstrap
|
run: npm run bootstrap
|
||||||
|
|
||||||
- name: audit tools
|
- name: audit tools
|
||||||
# `|| npm audit` to pretty-print the output if vulnerabilies are found after filtering.
|
run: npm audit --audit-level=moderate
|
||||||
run: npm audit --audit-level=moderate --json | scripts/audit-allow-list || npm audit --audit-level=moderate
|
|
||||||
|
|
||||||
- name: audit packages
|
- name: audit packages
|
||||||
run: npm run audit-all
|
run: npm run audit-all
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user